Question 11
An administrator applied a block-all IPS profile for client and server targets to secure the server, but the database team reported the application stopped working immediately after. How can an administrator apply IPS in a way that ensures it does not disrupt existing applications in the network?
- Use an IPS profile with all signatures in monitor mode and verify patterns before blocking.
- Limit the IPS profile to server targets only to avoid blocking connections from the server to clients.
- Select flow mode in the IPS profile to accurately analyze application patterns.
- Set the IPS profile signature action to default to discard all possible false positives.